Array Index Vulnerability in Linux Kernel Networking Component

CVE-2024-57996

Summary

A vulnerability in the Linux kernel's packet scheduling implementation can lead to an array index out-of-bounds condition. With a limit of one packet, the scheduler may incorrectly manage queued packets, resulting in potential system crashes. This issue arises when the token bucket filter (TBF) and stochastic fair queueing (SFQ) interact under specific conditions, leading to packet drops and eventual underflow errors within the scheduling queue. This bug exemplifies the critical importance of rigorous boundary checks in network components to enhance system stability and security.

References